Privacy Policy
Last updated: April 16, 2026
This Privacy Policy explains how Brian Torres, an individual doing business as URPay ("URPay," "we," "us," or "our"), collects, uses, shares, and protects your information when you use the URPay mobile app or website at urpayapp.com (together, the "Service"). By using the Service, you agree to the practices described here.
Short version: We collect only what we need to run URPay, we never sell your data, payments are processed by Stripe (we never see your card), and you can delete your account and data anytime by emailing us.
1. Information We Collect
Information you give us
- Account info: name, email, password (stored hashed), optional phone number.
- Business info: business name, address, phone, email, logo, invoice defaults — anything you enter into your business profile.
- Job and client data: job details, costs, client/company names and contacts, invoices, line items, team member names and pay rates, clock entries, photos you upload.
- Voice input: audio you record for voice-to-invoice is transcribed using Apple's on-device Speech framework and sent to our AI provider (Anthropic) to generate invoice content. Audio is not retained after transcription.
Information collected automatically
- Device info: device type, OS version, app version, crash logs.
- Usage info: which features you use, timestamps, session length — used only to improve the product.
Information from third parties
- Apple Sign In: if you sign in with Apple, we receive your name and email (or Apple's private relay email, if you choose to hide your real one).
- Stripe: when you subscribe, Stripe handles payment and shares your customer ID, subscription status, and billing events with us. We never receive or store your full card number.
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Process subscriptions and payments through Stripe
- Send transactional emails (receipts, account notices, password resets)
- Generate AI-powered features you use (profit insights, voice-to-invoice) via the Anthropic API
- Respond to support requests
- Detect fraud, abuse, and security issues
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We share it only with:
- Service providers that power URPay: Supabase (database and authentication hosting), Stripe (payment processing), Anthropic (AI features), Apple (Sign In with Apple), Vercel (website hosting). Each is bound by their own privacy terms.
- Legal authorities when required by law, subpoena, or to protect our rights or the safety of others.
- A buyer or successor if URPay is involved in a merger, acquisition, or sale of assets. You'll be notified before your data is transferred.
4. How We Protect Your Information
We use industry-standard security practices: encrypted connections (TLS), Supabase Row Level Security policies that prevent users from accessing each other's data, hashed passwords, and restricted admin access. No system is perfectly secure, but we take protection seriously.
5. Data Retention
We keep your data as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we must retain records for legal, tax, or fraud-prevention reasons (for example, Stripe payment records are retained per tax law).
6. Your Rights
California residents (CCPA/CPRA)
If you live in California, you have the right to:
- Know what personal information we collect and how we use it
- Request a copy of your personal information
- Request deletion of your personal information
- Correct inaccurate information
- Opt out of the sale of your information (we don't sell it — nothing to opt out of)
- Be free from retaliation for exercising these rights
European residents (GDPR)
If you're in the EU, UK, or EEA, you have the rights of access, rectification, erasure, restriction, data portability, and objection. Our legal bases for processing are your consent, contractual necessity (to deliver the Service), and legitimate interests (security and product improvement).
Exercising your rights
Email brian07rt@gmail.com with your request. We'll respond within 30 days.
7. Children
URPay is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email us and we'll delete it.
8. International Users
URPay is operated from the United States. If you use the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer.
9. Third-Party Links
The Service may link to third-party websites (for example, Stripe's checkout). We are not responsible for their privacy practices. Review their policies separately.
10. Changes to This Policy
We may update this Privacy Policy as the Service evolves. If changes are material, we'll notify you by email or in the app before they take effect. Continued use after an update means you accept the new terms.
11. Contact Us
Questions, requests, or concerns? Email brian07rt@gmail.com.